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Please amend the claims to read as indicated in the following list of 
claims: 

1. [Currently amended] A system comprising 
a trusted computing platform, 

one or more logically protected computing environments 

and 

a filesystem comprising a plurality of files and links 
defining access paths between said files, 

the system being arranged to load onto said trusted 
computing platform a predetermined security policy 
including a plurality of security rules in respect of one 
or more of said logically protected computing environments 
and/or said files, 

the system being further arranged toj_ 

(1) determine that first and second security rules apply to 
a specified file or set of files, 

(2) determine the complete set of fileSj. -for fileset^-f to 
which each of said first and second security rules 
applies , 

(3) determine if the fileset of said first security rule is 
a complete subset of the fileset of said second 
security rule, and if so, 

a. apply ing said first security rule to said 

specified file or set of files, and otherwise, 

b. select ing one of said first and second security 

rules on the basis of another attribute thereof, 
and apply ing the selected security rule to said 
specified file or set of files. 
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2. [Original] A system according to claim 1, wherein said 
security rules comprise or include a plurality of file 
rules defining discretionary access controls in respect of 
one or more of said logically protected computing 
environments and/or files. 

3. [Currently amended] A system according to claim 1, 
wherein said security rules comprise or include a plurality 
of execution control rules defining [ [a] ] or modifying 
security attributes in respect of one or more of said 
logically protected computing environments and/or files. 

4. [Original] A system according to claim 2, wherein in 
said first and second security rules are file rules, and 
the fileset to which said first security rule applies is 
not a complete subset of the fileset to which the second 
security rules applies, the system is arranged to determine 
which of the first and second security rules is the most 
restrictive, and apply that rule to said specified file or 
set of files. 

5. [Currently amended] A system according to claim 3, 
wherein [ [if] ] said first and second security rules are 
execution control rules and the fileset to which said first 
security rule applies is not a complete subset of the 
fileset to which said second security rule applies, the 
system is arranged to select and apply the rule which was 
most recently added to the security policy. 
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6. [Original] A system according to claim 5, arranged to 
provide a warning or error message indicating to a user 
that a rule conflict exists. 

7. [Previously presented] A system according to claim 
1, including means for identifying the creation of a rule 
conflict when a link between files or sets of files is 
created and providing an error message or warning 
accordingly . 

8. [Original] A system according to claim 7, arranged to 
remove the offending link to remove the conflict. 

Claim 9. Cancelled. 

10. [Currently amended] A method of applying a 
predetermined security policy to a system having trusted 
computing platform, one or more logically protected 
computing environments and a filesystem comprising a 
plurality of files and links defining access paths between 
said files, said security computing environments and/or 
said files, the method carried out by the system comprising 
the steps ofj_ 

determining that first and second security rules apply 
to a specified file or set of files, 

determining the complete set of files^_ -for fileset^^- 
to which each of said first and second security rules 
applies , 

determining if the fileset of said first security rule 
is a complete subset of the fileset of said second security 
rule, and if so, 
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a. applying said first security rule to said 
specified file or set of files, and otherwise, 

b. selecting one of said first and second 
security rules on the basis of another attribute 
thereof, and applying the selected security rule to 
said specified file or set of files. 

11. [Original] A method according to claim 10 wherein the 
security rules define access controls and/or modify 
security attributes . 



Claim 12. Cancelled. 



